6�_��2���Ln�G4*�j��۬ݤ <I%��LC�� 6w�v4�ORW˾+Dԙ�B�&�Q�A(ج��8����eq<��k�X�}Y��ɒ8/����(/�_<����y������e1��K�5��p��@�{C��}��� <�'G�ZY�d����V�]�@�n��j�����3��j��[�����U$��6I[�45�#|l���|R ��lȍhS6�"sG��e��-N�{z�a��5��i�r-r�!363�~�0��O�z����U���ԉ�!c�<�4��������ā��J ��1�r�:DN�a'jS�ڵt�PZ�uY⺽ l:�r',�=96��'���R/�TB�g��TD)���g�}@�qF*�������d�h������֗C�����>!��� ���MY���=~��/�f0��M�E)2�g�r��l(_��/���`�y翪=�rʊ����S��(Z�p-�vʏ�:�9��J��mHI8��>�kEH���c���>f����N ���b,�ܡ��M~�9�:dve3 =c�������rȹ3a E�GЂ���?��u��Z��:�ϙ��F�;���]IR�zaټy���L5t� Q�i&?V��v��;�0o��u��s hȫt��#�`��|�t\%��.x����h�x�*����b\߽��w@:�0�����{�H��<%Lj�@��&TO���H@H�����[�� ��W*i5L��7�3�R:#��~%m3�ϸ�� ,�!Ӓ�m��q#d!ڠva��i]�-����8F��3���܅LQI=<(���|��PT���g��Wg��և� %���H��o���=e�����jF����#��/F6�-��5�]�:6uo�ۻm���q1pM����rU��-�����i�5��ʧ7y�@(8q*��9�ڀwMq�-Yw��*`�R�{FI�}�C{J7�Q������Viaa��Ժ.�7^�p]hl�K�E��C�G4��d���8ʴ^���0{~��n_��Xi�vz��4��jk J�$�{�ă��h����@УATg=���}v�~�����q*�r�4�lP�!��ڧ�2W�AEg,���z<�3V����W2��fȑ��\ ݠi��0��?d�j�B�"\��i����}=vը`T���r�ZldE�_�Y�a�u�=�س\w����[�]���$v�}Rp.+����?а%؍C�<��pAF����n{JT�)�D��z��^�Bx9\u�n�p��� eK�օ.��I�1T��ryyk� AD��y�ֿ�}���ݚ{/�ν�b�xA�):F�E��}b;�����6���h���'�WF�����o��6�� ˭P Ƞ�_1�<y��C�1�sr�"��� ���u=�[��u�p�vXUe�� ���q&����w���[�����W��)&��I��8GA=�s��&�Nh��<��<����`nq��ū���V��Y �N$.� ����;��HlcF��Dͮ�q�1̲DH�P����{伝@�|v�x}�PS7@�C��f�����j�4*}�o �3�楒+�D�. / �q�Ϫ��=-k.lvw�� �@�Yل�_D�c:K��ef��ԾE��/����?���*��R�7�,KR)Nj�����Hk9C��Pe�� /v���)��'ͧio��[D7�؛'��y��*ؐR�����U��w�lK�[ծ�J7oZH��&2�3���QS�^L��(�|���#��m�qP�K��A(R4�;�u����)�Cp���z��St�Z$�5�H{�=q�iHG�Z��W�غ�=a/`3�J�'�Ô3A���� �-X=�X�-/�}�i������M�M� !M�Z))���B�����>���iy�����D�!)�M����n)�v3�����/�ĸ1*�hÐ鐝Ԇȗ3x"�4['���٦�q�����$ �Sr+/��ş~R�YT�6<�0y��&V���A���E�f6� ��;��#Nym�����b0�*�m5s63�KێqG�;]_����t=����ӗ�nJ�b���ޫ�^r,�b���2V|��>�� � �JV̺�D����˧W���g���T ��e�O_��I���a�-���L�s�78����SR*���J�dY�LGƫ�+o���(���=c�(u8�jބL�U�q�Ā�y�cg\��i&1~[wƃk]���"���J6l��Wb���B���1������ 4�H*�O;*����A������b�;�g89��$tܿi�?Oz�?D�� �(ߚ�K]W1�H�+j�/^M���Pq$�5�K�%4�Dňtv�0��Q����{� ^�ǖ��V�c�m]�R�B���d-$��%� �2N� nـh�8�����c��\������D���%Я��j[=?��h8�Yו*�՜4\�}z����t�7���49&���w�P]W�^� ��!6�[� /S�ݥ�j��R5������ ��ck�Vw�RY��� �s����ʇ��ᤑa��n��&��6'�S���LWy�bYe<��*��� ̈�z\��`ߖ���m��嬲���#a�O�&[OR�i���YjF�ݬ�9��;�v/n.L��/�|�$�]�L��S�ND�����VCz}q�Z�f��.L�gyVz9�UV���lD}Y�� ӑ��̎�#����n7��T�,/�����8�� k<�"�A�p��}d�g(�9]J��g�FGo���*̃h�_�ϼ�2$��� Kv:���)��F���Ǧdtѫ٨鮯;p<ґ���mU�e�)�V�����!���-H�KE!$q������\�l�e�7��R��s}�3����9gXY��j��#f�� >I�z�z�A����&��9X�U��+,`�WG�>&��*��x�l���n��A_�=�ݮ��/���ҳJ3� ,��r>d�8߬���r�-�N��V�m��:7�1 �擫d^q�k��0��/�K�?��5�[yF��4%��*zݹ�X�t��4��T��ƫhvh~�ڹ̴����@�H�7b��'��ok�A�{�XC�E5�!zla�I����pZS�zjn�P��{y�E�� ��/�)���E���f��G�����H�#R�'���;K��!���V�G��iCx2��9��Eb�4�X+VM�<Aj����Uï���aG7�/����D�iG���]�4˘נ$R�~-���^7h��Ti��a��L<� /m�,�G�����@��Њ4����Un�����ktǐk�]��=�����^�Å�k[���h6pl�kLN��/�����P�\�)����*�2=}�6 M���������f[�ȗ����� �.���5��D9�5��?�r\����8���;c��~�nu��v?N�S�Q1�E�K��rz��ז\_�J�[h������d����XͶ�q�I&��o}�S����`�W�J}�2�8�6�}�M�BQ=h��Q�cN��$�����u�mZY�o���*��6�A��X�)��lT}0o��]p/|�~�^����>D>-�:R1�����(��a� {~�B����W�G[Ӝ o"��e����Q��n`�T�5G�9�Bz�ի��V'Gx~�5e�r
Static task
static1
Behavioral task
behavioral1
Sample
032e245379732e9142e2d898ab1fb2882dc2f980157aba70d040721d14ba7c34.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
032e245379732e9142e2d898ab1fb2882dc2f980157aba70d040721d14ba7c34.exe
Resource
win10v2004-20240704-en
General
-
Target
032e245379732e9142e2d898ab1fb2882dc2f980157aba70d040721d14ba7c34.exe
-
Size
1020KB
-
MD5
b33f5147170074b4e52095556f37ca49
-
SHA1
958d8c0f36065968c15dc14f60bad2e4cae7fa14
-
SHA256
032e245379732e9142e2d898ab1fb2882dc2f980157aba70d040721d14ba7c34
-
SHA512
5cd30113f8609c1ca37b07156c8ae07bad509c1ca69592e5494abaa66c630c06b8555e3c10e0df630aaacb08e7fcd7a6c087d8e1a1ad685639a0683d139c25b8
-
SSDEEP
24576:lrgQRoA3dgU06CB49v91HI6vQCNYvIFwhVZ:lrgrAgMFI6WMwhz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 032e245379732e9142e2d898ab1fb2882dc2f980157aba70d040721d14ba7c34.exe
Files
-
032e245379732e9142e2d898ab1fb2882dc2f980157aba70d040721d14ba7c34.exe.exe windows:5 windows x86 arch:x86
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Exports
Exports
Sections
Size: 41KB - Virtual size: 108KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 16KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 1024B - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 202KB - Virtual size: 7.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE